What’s Vulnerable › Products

outline vulnerabilities

22 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 17 published in the last 12 months.

Check whether your outline version is affected

Latest outline vulnerabilities

• CVE-2026-113611 — Outline before 1.8.0 Information Disclosure via Orphaned Webhook Subscriptions (CVSS 4.9)
• CVE-2026-54573 — Authorization Bypass in API Key/OAuth Scopes via Path Parsing Discrepancy (CVSS 5.3)
• CVE-2026-44695 — Outline: Slack OAuth state can link a victim Outline account to an attacker Slack identity (CVSS 6.5)
• CVE-2026-43890 — Outline: IDOR in subscriptions.create allows cross-tenant subscription on private documents (sibling of GHSA-23jj-rp48-w7q7) (CVSS 7.7)
• CVE-2026-43889 — Outline: Unauthorized Document Publication via Mixed collectionId+documentId Share (CVSS 6.5)
• CVE-2026-43888 — Outline: Zip Extraction Path Escape via PATH_MAX Truncation in Collection Import (CVSS 8.7)
• CVE-2026-43887 — Outline: Stored XSS via Comment Mentions (CVSS 7.3)
• CVE-2026-43886 — Outline: OAuth Scope Validation Logic Error Allows Privilege Escalation to Wildcard API Access (CVSS 8.2)
• CVE-2026-41649 — Outline has IDOR in document share creation that allows unauthorized access to private documents across workspaces (CVSS 7.7)
• CVE-2026-33640 — Outline has a rate limit bypass that allows brute force of email login OTP (CVSS 9.8)
• CVE-2026-28506 — Outline's Information Disclosure in Activity Logs allows User Enumeration of Private Drafts (CVSS 4.3)
• CVE-2026-24901 — Outline's IDOR allows unauthorized viewing and seizing of private deleted drafts (CVSS 8.8)
• CVE-2026-25062 — Outline Affected an Arbitrary File Read via Path Traversal in JSON Import (CVSS 5.5)
• CVE-2025-68663 — Outline has a suspended user authentication bypass via WebSocket connections (CVSS 5.3)
• CVE-2025-64487 — Outline is vulnerable to privilege escalation vulnerability in document sharing (CVSS 7.6)
• CVE-2023-54331 — Outline 1.6.0 - Unquoted Service Path (CVSS 7.8)
• CVE-2025-58351 — Outline's Local File Storage Feature can Cause CSP Bypass (CVSS 6.8)
• CVE-2024-40626 — Stored Cross-site Scripting (XSS) vulnerability in Outline editor (CVSS 5.4)
• CVE-2024-37829 — (CVSS 8.8)
• CVE-2024-37830 — (CVSS 6.1)
• CVE-2023-3532 — Cross-site Scripting (XSS) - Stored in outline/outline (CVSS 5.4)
• CVE-2022-2342 — Cross-site Scripting (XSS) - Stored in outline/outline (CVSS 5.4)